$ rpki-client -vvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5D4D209030ED11EE9A24D25BC4F9AE02.roa File: 5D4D209030ED11EE9A24D25BC4F9AE02.roa (raw, json) Hash identifier: h0tUzjsSDJepu4YPR5C33X4gta0umpYL27rKDh0bZWE= Subject key identifier: 09:C1:C9:0E:2A:E1:BA:44:93:CC:97:47:FE:75:D1:7F:96:C2:7B:3A Certificate issuer: /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D Certificate serial: E8 Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5D4D209030ED11EE9A24D25BC4F9AE02.roa Signing time: Wed 09 Oct 2024 04:18:32 +0000 ROA not before: Wed 09 Oct 2024 04:18:32 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 133752 IP address blocks: 103.133.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146ABC Validity Not Before: Oct 9 04:18:32 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67060418-d51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:24:82:a3:73:94:1b:cc:a8:d1:97:3f:7b: 33:de:68:6a:c5:7b:e3:76:17:25:39:98:4d:23:04: d6:fb:39:3b:4e:a1:3c:12:4e:e9:d7:be:b6:45:7c: a7:c0:79:00:1b:bc:55:e4:5c:86:44:cb:e8:f7:a5: f4:d3:49:49:45:d3:d0:a9:65:e1:a6:7c:4b:6c:37: 17:83:01:a2:4a:09:23:23:f9:be:0f:ea:dc:10:9c: d2:18:0e:6e:83:82:c7:99:76:b9:11:cb:60:f7:32: 8e:06:a8:83:4c:f5:0e:a2:2d:01:49:de:21:c7:d2: bf:70:09:e0:cd:a5:5c:02:1f:69:74:35:dd:5b:18: bf:d4:aa:04:7a:54:d0:f3:62:ce:b3:1c:8b:36:67: a2:a4:30:55:5b:f1:85:34:f1:f6:c6:c2:f7:b2:4b: 74:0b:e3:3c:e7:5d:7f:8b:4f:28:90:be:65:00:25: 16:55:9e:39:15:4f:48:22:d1:0d:98:73:f3:1e:95: 44:f5:bb:d7:98:b2:ce:07:e9:ca:9c:56:75:46:16: d0:6d:70:52:1a:4c:db:2f:7d:26:6a:0b:f9:cf:d7: 7d:9f:c1:50:a0:d4:83:f5:29:db:d3:c2:49:3a:9b: 24:5b:81:b0:dc:fb:85:ea:8b:6b:2a:e8:25:f4:84: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C1:C9:0E:2A:E1:BA:44:93:CC:97:47:FE:75:D1:7F:96:C2:7B:3A X509v3 Authority Key Identifier: keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5D4D209030ED11EE9A24D25BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.190.0/24 Signature Algorithm: sha256WithRSAEncryption 46:88:c1:74:1b:36:3c:43:71:b4:d6:a0:3c:8e:7d:cd:f9:e3: 1b:45:ce:14:7a:b8:db:d5:db:ac:4e:e6:77:a3:9a:47:b7:59: 71:20:ba:58:b7:30:bf:09:51:4b:c6:15:cf:8b:83:a1:57:0a: bd:d6:f4:e1:32:6c:30:a3:8f:f9:cc:5c:75:08:41:4f:e5:b5: 19:bd:62:5e:5f:24:98:a7:dd:89:f2:9a:df:10:ae:df:27:df: 8c:ca:7d:a2:99:7b:31:9a:4f:24:a0:aa:11:e5:32:1b:2a:04: 85:a8:17:3c:0e:6e:0c:37:b6:46:b4:5a:41:4e:8b:3b:d6:be: df:32:fe:9d:1b:8a:8b:e5:34:61:19:25:e8:11:a2:03:5d:ec: d2:14:70:cf:1d:fa:36:0e:8e:75:57:4d:55:d1:13:1c:e5:1f: 6d:85:4a:d0:bc:82:05:b4:12:30:be:a4:e5:14:13:b9:65:c2: 31:96:29:a4:e3:4e:6c:44:c8:50:4c:60:67:f5:25:91:8d:1c: d3:65:ad:9b:69:cc:e3:20:ee:bf:42:7c:67:db:81:ef:5d:e0: 12:03:03:2d:92:58:11:94:ab:a9:78:79:bd:4e:92:06:30:19: 2b:c9:dd:55:97:13:90:3f:27:34:8a:05:ef:b3:27:fe:82:7b: 51:9d:d6:25 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBQkMxMTAvBgNVBAUTKDU3NDk4NUUyNkQ4Qzc3MTZCMDlFRDUwMzE5QjRDRTY0 OTYxREU3MEQwHhcNMjQxMDA5MDQxODMyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA2MDQxOC1kNTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr38kgqNzlBvMqNGXP3sz3mhqxXvjdhclOZhNIwTW+zk7TqE8Ek7p1762RXyn wHkAG7xV5FyGRMvo96X000lJRdPQqWXhpnxLbDcXgwGiSgkjI/m+D+rcEJzSGA5u g4LHmXa5Ectg9zKOBqiDTPUOoi0BSd4hx9K/cAngzaVcAh9pdDXdWxi/1KoEelTQ 82LOsxyLNmeipDBVW/GFNPH2xsL3skt0C+M8511/i08okL5lACUWVZ45FU9IItEN mHPzHpVE9bvXmLLOB+nKnFZ1RhbQbXBSGkzbL30magv5z9d9n8FQoNSD9Snb08JJ OpskW4Gw3PuF6otrKugl9ISrwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAnByQ4q 4bpEk8yXR/510X+Wwns6MB8GA1UdIwQYMBaAFFdJheJtjHcWsJ7VAxm0zmSWHecN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFCQy9GMEU3OTg3QzMw RUMxMUVFOTgwRUIyNDdDNEY5QUUwMi9WMG1GNG0yTWR4YXdudFVER2JUT1pKWWQ1 dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YwbUY0bTJNZHhhd250VURHYlRPWkpZZDV3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBQkMvRjBFNzk4N0MzMEVDMTFFRTk4MEVCMjQ3QzRGOUFFMDIvNUQ0RDIwOTAz MEVEMTFFRTlBMjREMjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnhb4wDQYJKoZIhvcNAQELBQADggEBAEaIwXQbNjxDcbTW oDyOfc354xtFzhR6uNvV26xO5nejmke3WXEguli3ML8JUUvGFc+Lg6FXCr3W9OEy bDCjj/nMXHUIQU/ltRm9Yl5fJJin3Ynymt8Qrt8n34zKfaKZezGaTySgqhHlMhsq BIWoFzwObgw3tka0WkFOizvWvt8y/p0biovlNGEZJegRogNd7NIUcM8d+jYOjnVX TVXRExzlH22FStC8ggW0EjC+pOUUE7llwjGWKaTjTmxEyFBMYGf1JZGNHNNlrZtp zOMg7r9CfGfbge9d4BIDAy2SWBGUq6l4eb1OkgYwGSvJ3VWXE5A/JzSKBe+zJ/6C e1Gd1iU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:50 2025 by rpki-client